CVE-2003-1354

The CVE-2003-1354 issue concerns GameSpy 3D 2.62–compatible gaming servers that respond with very large UDP packets to tiny requests, enabling remote attackers to use these servers as an amplification vector for DDoS attacks with spoofed UDP query packets (illustrated by Battlefield 1942). The vu...

Unreal Tournament 2004 "secure" Overflow (Win32)

This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...

Unreal Tournament 2004 "secure" Overflow (Linux)

This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...

CVE-2005-1556

Gamespy cd-key validation system allows remote attackers to cause a denial of service cd-key already in use by capturing and replaying a cd-key authorization session...

CVE-2005-1556

CVE-2005-1556 affects the Gamespy cd-key validation system. The vulnerability allows remote attackers to cause a denial of service (cd-key already in use) by capturing and replaying a cd-key authorization session. The provided documents describe the issue but do not include exploit code, affected...

CVE-2005-1556

Gamespy cd-key validation system allows remote attackers to cause a denial of service cd-key already in use by capturing and replaying a cd-key authorization session...

CVE-2005-1504

GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use...

CVE-2005-1504

The CVE-2005-1504 entry concerns GameSpy SDK CD-Key Validation Toolkit. The vulnerability is a remote bypass of CD-key validation by sending a spoofed \disc\ command, causing the server to believe the CD key is no longer in use. Affected component: the CD-key validation mechanism within the GameS...

CVE-2005-1504

GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use...

CVE-2004-1587

The CVE affects Monolith games: Alien vs. Predator 2 (≤1.0.9.6), Blood 2 (≤2.1), No One Lives Forever (≤1.004), and Shogo (≤2.2). A remote, unauthenticated attacker can trigger a buffer overflow via a long Gamespy query, causing an application crash (DoS). The issue is network-exposed and arises ...

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow source: https://www.securityfocus.com/bid/12423/info Painkiller is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application durin...

[Full-Disclosure] Limited buffer-overflow in Painkiller 1.35

Luigi Auriemma Application: Painkiller http://www.painkillergame.com Versions: = 1.35 Platforms: Windows Bug: limited buffer-overflow Exploitation: remote, versus server in-game Date: 02 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction ...

People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12423/info Painkiller is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application during server-side authorization of a Gamespy cd-key hash. Painkiller versions...

Gamespy Software Development Kit - CD-Key Validation Buffer Overflow

Gamespy Software Development Kit - CD-Key Validation Buffer Overflow source: https://www.securityfocus.com/bid/11881/info It has been reported that the GameSpy SDK is prone to a buffer overflow vulnerability in its CD-key validation functionality. This issue is due to a failure of the SDK to...

In-game buffer-overflow in the Gamespy cd-key validation SDK

Luigi Auriemma Application: Gamespy cd-key validation SDK http://www.gamespy.net Versions: before 20 November 2004 Games: due to the implementation of this SDK is hard to test and list all the vulnerable games, however the following is the official list of games that use the various Gamespy SDKs ...

Gamespy Software Development Kit - CD-Key Validation Buffer Overflow

source: https://www.securityfocus.com/bid/11881/info It has been reported that the GameSpy SDK is prone to a buffer overflow vulnerability in its CD-key validation functionality. This issue is due to a failure of the SDK to properly check the length of user-supplied network data prior to copying ...

Unreal Tournament 2004 ""Secure"" Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Unreal Tournament 2004 - 'Secure' Remote Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Unreal...

Unreal Tournament 2004 - Secure Remote Overflow (Metasploit)

Unreal Tournament 2004 - Secure Remote Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

GameSpy SDK Malformed \query\ Request Overflow DoS

The remote GameSpy server could be disabled by sending a malformed packet. An attacker could exploit this flaw to crash the affected application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12081; scriptversion"1.15"; scriptcvsdate"Date: 2018/11/15 20:50:21";...